diff --git a/nginx-config.configmap.yaml b/nginx-config.configmap.yaml
index 7fdfb49..672e3a3 100644
--- a/nginx-config.configmap.yaml
+++ b/nginx-config.configmap.yaml
@@ -33,9 +33,8 @@ data:
     iso_code;\n\t        $geoip2_data_city_name city names en;\n\t        $geoip2_data_country_name
     country names en;\n\t}\n     \n\tmap $geoip2_data_country_iso_code:$ssl_client_verify
     $allowed_country {\n\t\tdefault no;\n\t\tFR\tyes; # Allow France\n\t\tGB\tyes;
-    # Allow UK\n                \"~:SUCCESS$\"  yes;   # Allow anyone with a valid
-    certificate (regardless of country)\n                #NL     yes; # Allow netherland\n\t\t#IN\tyes;
-    \ # Allow India\n\t}\n\t# Full list of country codes: https://en.wikipedia.org/wiki/List_of_ISO_3166_country_codes\n\n\tmap
+    # Allow UK\n                #NL     yes; # Allow netherland\n\t\t#IN\tyes;  #
+    Allow India\n\t}\n\t# Full list of country codes: https://en.wikipedia.org/wiki/List_of_ISO_3166_country_codes\n\n\tmap
     $allowed_country $should_log_blocked {\n\t\tno       1;\n\t\tdefault 0;\n\t}\n\n\tinclude
     /etc/nginx/deny.d/*.conf;\n\tinclude /etc/nginx/conf.d/*.conf;\n        include
     /etc/nginx/blacklisted.d/*.conf;\n\n\t# adding this line for the fial2ban settings\t\n
diff --git a/nginx.conf b/nginx.conf
index a71fed7..9e11afb 100755
--- a/nginx.conf
+++ b/nginx.conf
@@ -68,7 +68,6 @@ http {
 		default no;
 		FR	yes; # Allow France
 		GB	yes; # Allow UK
-                "~:SUCCESS$"  yes;   # Allow anyone with a valid certificate (regardless of country)
                 #NL     yes; # Allow netherland
 		#IN	yes;  # Allow India
 	}
diff --git a/terraform/nginx_config.tftpl b/terraform/nginx_config.tftpl
index 6aef59e..aa46d9b 100644
--- a/terraform/nginx_config.tftpl
+++ b/terraform/nginx_config.tftpl
@@ -9,19 +9,14 @@ upstream ${name_site}_backend {
 
 server {
         server_name ${name_site}.tryton.geeraert.eu www.${name_site}.tryton.geeraert.eu;
-#        if ($allowed_country = no) {
-#            return 444; # Forbidden
-#            # Or use 'return 444;' to close the connection without a response
-#	    # The 444 Status: If you want to save bandwidth and "ghost" attackers, use return 444;. It drops the connection immediately without even sending a "Forbidden" header.
-#        } 
+        if ($allowed_country = no) {
+            return 444; # Forbidden
+            # Or use 'return 444;' to close the connection without a response
+	    # The 444 Status: If you want to save bandwidth and "ghost" attackers, use return 444;. It drops the connection immediately without even sending a "Forbidden" header.
+        } 
 
         location / {
-		if ($allowed_country = yes) {
-
                 proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend;
-                break;
-        }
-
                 proxy_set_header    Upgrade     $http_upgrade;
 		proxy_set_header Host $host;
                 ${extra-value-location}
@@ -39,14 +34,6 @@ server {
 		}
                 %{ endif }
 
-        if ($ssl_client_verify != "SUCCESS") {
-            # Not UK AND no valid cert? Blocked.
-            return 403;
-        }
-
-        # 3. If NOT from UK but HAS cert, let them in.
-                proxy_pass %{ if proxy_pass_https}https%{else}http%{ endif }://${name_site}_backend;
-
 
         }
         location /.well-known/acme-challenge/ {